IMY issues an administrative fine against Region Dalarna
10 October 2023
The Swedish Authority for Privacy Protection (IMY) issues an administrative fine against Region Dalarna following complaints about the region sending sensitive personal data visible in windowed envelopes.
When Region Dalarna has invited their patients to a doctor’s appointment, the healthcare facility to which the patient shall go has been visibly stated on the envelope. Hence, the Swedish Authority for Privacy Protection has concluded that sensitive personal data has been revealed for postmen, people living at the same address, and individuals who have received the letter at an incorrect address. Because of that, the sensitive personal data has not been protected to a satisfactory extent. Thus, IMY issues an administrative fine of 200 000 SEK against Region Dalarna.
Source: https://www.imy.se/nyheter/sanktionsavgift-mot-region-dalarna/